Snapdragon 460 Mobile Platform Firmware

115 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-33088 Dec 05, 03:15 HIGH This Week

Memory corruption when processing cmd parameters while parsing vdev. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Null Pointer Dereference Qualcomm 315 5g Iot Modem Firmware +299

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-28588 Dec 05, 03:15 HIGH PATCH This Week

Transient DOS in Bluetooth Host while rfc slot allocation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Information Disclosure Integer Overflow Qualcomm Apq8017 Firmware Apq8064au Firmware +206

NVD

CVSS 3.1

7.5

EPSS

0.5%

CVE-2023-28587 Dec 05, 03:15 HIGH This Week

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +181

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-28586 Dec 05, 03:15 MEDIUM This Month

Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware +305

NVD

CVSS 3.1

6.5

EPSS

0.1%

CVE-2023-28585 Dec 05, 03:15 HIGH This Week

Memory corruption while loading an ELF segment in TEE Kernel. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +272

NVD

CVSS 3.1

8.8

EPSS

0.1%

CVE-2023-28551 Dec 05, 03:15 HIGH This Week

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +239

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28550 Dec 05, 03:15 HIGH This Week

Memory corruption in MPP performance while accessing DSM watermark using external memory address. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +326

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28546 Dec 05, 03:15 HIGH This Week

Memory Corruption in SPS Application while exporting public key in sorter TA. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Apq8017 Firmware Apq8037 Firmware +271

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28569 Nov 07, 06:15 MEDIUM This Month

Information disclosure in WLAN HAL while handling command through WMI interfaces. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Aqt1000 Firmware Ar9380 Firmware +205

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28568 Nov 07, 06:15 MEDIUM This Month

Information disclosure in WLAN HAL when reception status handler is called. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Aqt1000 Firmware Fastconnect 6200 Firmware +85

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28566 Nov 07, 06:15 MEDIUM This Month

Information disclosure in WLAN HAL while handling the WMI state info command. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Aqt1000 Firmware Csrb31024 Firmware +122

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28563 Nov 07, 06:15 MEDIUM This Month

Information disclosure in IOE Firmware while handling WMI command. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm Aqt1000 Firmware Ar8031 Firmware +227

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2023-28556 Nov 07, 06:15 HIGH This Week

Cryptographic issue in HLOS during key management. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +217

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28545 Nov 07, 06:15 HIGH This Week

Memory corruption in TZ Secure OS while loading an app ELF. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +195

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-24852 Nov 07, 06:15 HIGH This Week

Memory Corruption in Core due to secure memory access by user while loading modem image. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware +263

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-22388 Nov 07, 06:15 CRITICAL Act Now

Memory Corruption in Multi-mode Call Processor while processing bit mask API. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +221

NVD

CVSS 3.1

9.8

EPSS

0.4%

CVE-2023-24850 Oct 03, 06:15 HIGH This Week

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Apq8017 Firmware Apq8037 Firmware Aqt1000 Firmware +201

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-24849 Oct 03, 06:15 HIGH This Week

Information Disclosure in data Modem while parsing an FMTP line in an SDP message. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +234

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-24848 Oct 03, 06:15 HIGH This Week

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +240

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-24847 Oct 03, 06:15 HIGH This Week

Transient DOS in Modem while allocating DSM items. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware +253

NVD

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-22385 Oct 03, 06:15 CRITICAL Act Now

Memory Corruption in Data Modem while making a MO call or MT VOLTE call. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +236

NVD

CVSS 3.1

9.8

EPSS

0.4%

CVE-2023-28559 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware Ar8031 Firmware Ar9380 Firmware +208

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28558 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN handler while processing PhyID in Tx status handler. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +192

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28557 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Aqt1000 Firmware Ar8031 Firmware +270

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-28544 Sep 05, 07:15 HIGH This Week

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware Ar9380 Firmware Csr8811 Firmware +202

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33088

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption when processing cmd parameters while parsing vdev. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Null Pointer Dereference +301

NVD

CVE-2023-28588

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Information Disclosure Integer Overflow Qualcomm +208

NVD

CVE-2023-28587

EPSS 0% CVSS 7.8

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +183

NVD

CVE-2023-28586

EPSS 0% CVSS 6.5

MEDIUM This Month

Buffer Overflow Information Disclosure Qualcomm +307

NVD

CVE-2023-28585

EPSS 0% CVSS 8.8

HIGH This Week

Memory corruption while loading an ELF segment in TEE Kernel. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +274

NVD

CVE-2023-28551

EPSS 0% CVSS 7.8

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +241

NVD

CVE-2023-28550

EPSS 0% CVSS 7.8

HIGH This Week

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +328

NVD

CVE-2023-28546

EPSS 0% CVSS 7.8

HIGH This Week

Memory Corruption in SPS Application while exporting public key in sorter TA. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +273

NVD

CVE-2023-28569

EPSS 0% CVSS 5.5

MEDIUM This Month

Information disclosure in WLAN HAL while handling command through WMI interfaces. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm +207

NVD

CVE-2023-28568

EPSS 0% CVSS 5.5

MEDIUM This Month

Information disclosure in WLAN HAL when reception status handler is called. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm +87

NVD

CVE-2023-28566

EPSS 0% CVSS 5.5

MEDIUM This Month

Information disclosure in WLAN HAL while handling the WMI state info command. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm +124

NVD

CVE-2023-28563

EPSS 0% CVSS 5.5

MEDIUM This Month

Information disclosure in IOE Firmware while handling WMI command. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Qualcomm +229

NVD

CVE-2023-28556

EPSS 0% CVSS 7.8

HIGH This Week

Cryptographic issue in HLOS during key management. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Qualcomm 315 5g Iot Modem Firmware +219

NVD

CVE-2023-28545

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in TZ Secure OS while loading an app ELF. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +197

NVD

CVE-2023-24852

EPSS 0% CVSS 7.8

HIGH This Week

Memory Corruption in Core due to secure memory access by user while loading modem image. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Buffer Overflow Qualcomm +265

NVD

CVE-2023-22388

EPSS 0% CVSS 9.8

CRITICAL Act Now

Buffer Overflow Memory Corruption Qualcomm +223

NVD

CVE-2023-24850

EPSS 0% CVSS 7.8

HIGH This Week

Buffer Overflow Qualcomm Apq8017 Firmware +203

NVD

CVE-2023-24849

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Information Disclosure Qualcomm +236

NVD

CVE-2023-24848

EPSS 0% CVSS 7.5

HIGH This Week

Buffer Overflow Information Disclosure Qualcomm +242

NVD

CVE-2023-24847

EPSS 0% CVSS 7.5

HIGH This Week

Denial Of Service Null Pointer Dereference Qualcomm +255

NVD

CVE-2023-22385

EPSS 0% CVSS 9.8

CRITICAL Act Now

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +238

NVD

CVE-2023-28559

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware +210

NVD

CVE-2023-28558

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN handler while processing PhyID in Tx status handler. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +194

NVD

CVE-2023-28557

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +272

NVD

CVE-2023-28544

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Aqt1000 Firmware +204

NVD

Prev Page 2 of 2